This listing of claims will replace all prior versions, and listings, of claims in the present 
application. 

LISTING OF CLAIMS: 

Claim 1 . (Currently Amended) A method for providing cryptographic keys usable in a network 
of connected computer nodes applying a signature scheme, tlie method executable by a first 

computer node comprising the steps of: 
generating a random secret key; 

generating an exponent interval /having a plurality of exponent elements, said exponent 
interval having a specified first random limit, wherein each element of said plurality of exponent 
elements of the exponent interval has a unique prime factor that is larger than a given security 
parameter; and 

providing, at said first computer node, a pubHc key comprising an exponent-interval 
description including said first random limit, and an interval width specification and a public key 
value derived Irom the random secret key, said public key value including a random prime value, 
a number (n) corresponding to a product of two large prime numbers forming said random secret 
key, said exponent interval, and two public values fi-om a set of elements having a square root 
modulo n, such that the random secret key and a selected exponent value firom the plurahty of 
exponent elements in said exponent interval / are usable for deriving a signature value on a 
message to be sent within the network to a second computer node for verification, wherein said 
deriving includes: computing an e-th root of a value derived firom the message and the random 
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secjret key using a cryptographic hash function, the e being an exponent value from exponent 
interval /, and 

receiving, at said second computer node, said signature value and said public key value, 
wherein verification of said signature value at said second computer node, includes raising said 
computed signature root value that fonns part of said signature value to the power of the 
exponent value e, and, from said provided pubUc key value, confirming that said exponent value 
e is contained in an exponent interval / having said plurality of exponent elements. 

Claim 2. (Currently Amended) The method according to claim 1 , wherein the step of generating 
[[a]] the random secret key comprises using two primes, the product of which is part of the 
public key. 

Claim 3. (Currently Amended) The method according to claim 1, wherein the step of generating 
[[a]] &e random secret key comprises selecting an integer value defining a class group and 
selecting two elements of the class group. 

Claim 4. (Original) The method according to claim 3, wherein the step of providing a public key 
comprises computing a modified public key value under use of the selected two elements and the 
exponent interval. 

Claim 5. - 6. (Canceled) 
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Claim 7. (Currently Amended) A method for verifying a signature value on a message in a 
network of connected computer nodes, the method executable by a second computer node 
comprising the steps of: 

receiving the signature value from a first computer node; 

providing, at the second computer node, a pubUc key comprising: an exponent-interval 
description having a specified first random limit and an interval width specification and, a public 
key value derived from the random secret key, said public key value includmg a random prime 
value, a number (n) corresponding to a product of two large prime numbers forming said random 
secret key, an exponent intei-val / having a plurality of exponent elements, and two public values 
from a set of elements having a square root modulo n, said signature value being derived from 
said random secret key and a selected exponent value from the plurality of exponent elements in 
said exponent interval / on a message to be sesi received within the network [[to]] at a second 
computer node for verification, said deriving including: computing an e-th root of a value 
derived from tlie message and the random secret key using a cryptographic hash function, the e 
being an exponent value from exponent interval /; and 

verifying, at said second computer node, using said provided public key value, whether 
an exponent value is contained in an exponent interval / having said plurality of exponent 
elements, wherein each element of said plurality of exponent elements of the exponent interval 
has a unique prime factor tliat is larger than a given security parameter, the signature value being 
invaUd if the exponent value is not contained in the exponent interval, and, the verifying of said 
signature value at said second computer node fiirther comprises: receiving, at said second 
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computer node, said signature value and said public key value, and raising said computed 
signature root value that forms part of said signature value to the power of the exponent value e. 

Claim 8,-13 (Canceled) 

Claim 14. (Currently Amended) A program storage device readable by machine, tangibly 
embodying a program of instructions executable by the machine to perform method steps for 
providing cryptographic keys usable in a network of connected computer nodes applying a 
signature scheme, said method steps comprising the steps of: 
generating a random secret key; 

generating an exponent interval / having a plurality of exponent elements, said exponent 
interval having a specified first random limit, wherein each element of said plurality of exponent 
elements of the exponent interval / has a unique prime factor that is larger than a given security 
parameter; and 

providing, at said fiiBt computer node, a public key comprising: an exponent-interval 
description having said specified first random limit and an interval vwdth specification, and a 
public key value derived fi'om the random secret key, said public key value including a random 
prime value, a number (n) corresponding to a product of two large prime numbers forming said 
random secret key, said exponent interval /, and two public values firom a set of elements having 
a square root modulo n, such that the random secret key and a selected exponent value fi-om the 
exponent interval are usable for deriving a signature value on a message to be sent within the 
network to a second computer node for verification, wherein said deriving includes: computing 
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an e-th root of a value derived from the message and the random secret key using a 
cryptographic hash function, the e being an exponent value from exponent interval / , and 

receiving, at said second computer node, said signature value and said public key value, 
wherein verification of said signature value at said second computer node, includes raising said 
computed signature root value that fonns part of said signature value to the power of the 
exponent value e, and, from said provided public key value, and confirming that said exponent 
value e is contained in an exponent interval /having said plurality of exponent elements. 



Claim 15.-17 (Canceled) 



Claim 18. (Currently Amended) A program storage device readable by machine, tangibly 
embodying a program of instructions executable by the machine to perform method steps for 
providing a signature value on a message in a network of connected computer nodes, said 
method steps comprising the steps of: 

receiving the signature value from a first computer node, 

providing, at said second computer node, a public key comprising: an exponent-interval 
description having a specified first random limit and an interval width specification and, a public 
key value derived from a random secret key, said public key value including a random prime 
value, a number (n) corresponding to a product of two large prime numbers forming said secret 
key, an exponent interval / having a plurality of exponent elements, and two public values from a 
set of elements having a square root modulo n, said signature value being derived from said 
random secret key and a selected exponent value from the plurality of exponent elements in said 
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exponent interval / on a message to be received within the network [[to]] at a second 
computer node for verification, said deriving including: computing an e-th root of a value 
derived from the message and the secret key using a cryptographic hash function, the e being an 
exponent value fi-ora exponent interval /; and 

verifying, at said second computer node, using said provided public key value, whether 
an exponent value is contained in an exponent interval / having a plurality of exponent elements, 
wherein each element of the exponent interval has a unique prime factor that is larger than a 
given security parameter, tlie signature value being invalid if the exponent value is not contained 
in the exponent interval, and, the verifying of said signature value at said second computer node 
further comprises: receiving, at said second computer node, said signature value and said 
provided public key value, and raising said computed signature root value that forms part of said 
signature value to the power of the exponent value e. 

Claim 19-21 (Canceled) 
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